foo<script>scr